SafeSky: A Secure Cloud Storage Middleware for End-User Applications

Proceedings of the IEEE Symposium on Reliable Distributed Systems

Volumn 2016-January, Issue , 2016, Pages 21-30

  Zhao, Rui ^a   Yue, Chuan ^a   Tak, Byungchul ^b   Tang, Chunqiang ^c  

^a Department of Geology and Geological Engineering   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

^c FACEBOOK   (United States)

Author keywords

Applications; Cloud storage; Middleware; Security

Indexed keywords

APPLICATIONS; AUTHENTICATION; COMPUTER OPERATING SYSTEMS; MIDDLEWARE; NETWORK SECURITY;

APPLICATION DEVELOPERS; CLOUD STORAGE SERVICES; CLOUD STORAGES; END-USER APPLICATIONS; EVALUATION AND ANALYSIS; SECURE CLOUD STORAGES; SECURITY; USER AUTHENTICATION;

DIGITAL STORAGE;

EID: 84960960702     PISSN: 10609857     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SRDS.2015.23     Document Type: Conference Paper

References (38)

1. H. Abu-Libdeh, L. Princehouse, and H. Weatherspoon. RACS: A case for cloud storage diversity. In Proc. of the ACM symposium on Cloud Computing (SoCC), pages 229-240, 2010.
2. G. Anthes. Security in the cloud. Commun. ACM, 53(11):16-18, 2010.
3. M. Armbrust, A. Fox, R. Griffith, A. D. Joseph, R. Katz, A. Konwinski, G. Lee, D. Patterson, A. Rabkin, I. Stoica, and M. Zaharia. A view of cloud computing. Commun. ACM, 53(4):50-58, 2010.
4. P. A. Bernstein. Getting consensus for data replication: Technical perspective. Commun. ACM, 57(8):92-92, 2014.
5. A. Bessani, M. Correia, B. Quaresma, F. Andŕe, and P. Sousa. DepSky: dependable and secure storage in a cloud-of-clouds. In Proc. of the EuroSys, pages 31-46, 2011.
6. M. Blaze. A cryptographic file system for unix. In Proc. of the ACM Conference on Computer and Communications Security (CCS), 1993.
7. K. D. Bowers, A. Juels, and A. Oprea. HAIL: A high-Availability and integrity layer for cloud storage. In Proc. of the ACM Conference on Computer and Communications Security (CCS), pages 187-198, 2009.
8. B. Calder, J. Wang, A. Ogus, N. Nilakantan, et al. Windows Azure Storage: A highly available cloud storage service with strong consistency. In Proc. of the ACM Symposium on Operating Systems Principles (SOSP), pages 143-157, 2011.
9. W. Du, K. Jayaraman, X. Tan, T. Luo, and S. Chapin. Position Paper: Why Are There So Many Vulnerabilities in Web Applications? In Proc. of the New Security Paradigms Workshop (NSPW), 2011.
10. M. Dworkin. Recommendation for Block Cipher Modes of Operation: The CCM Mode for Authentication and Confidentiality. In NIST Special Publication 800-38C.
11. R. T. Fielding and R. N. Taylor. Principled design of the modern Web architecture. ACM Transactions on Internet Technology (TOIT), 2(2):115-150, 2002.
12. N. Heninger, Z. Durumeric, E. Wustrow, and J. A. Halderman. Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices. In Proc. of the USENIX Security Symposium, 2012.
13. S. Kamara and K. Lauter. Cryptographic cloud storage. In Proc. of the Financial Cryptography (FC), pages 136-149, 2010.
14. P. Mahajan, S. Setty, S. Lee, A. Clement, L. Alvisi, M. Dahlin, and M. Walfish. Depot: Cloud Storage with Minimal Trust. ACM Trans. Comput. Syst., 29(4):1-38, 2011.
15. C. Pautasso, O. Zimmermann, and F. Leymann. Restful web services vs. "big" web services: making the right architectural decision. In Proc. of the International Conference on World Wide Web (WWW), 2008.
16. R. A. Popa, J. Lorch, D. Molnar, H. J. Wang, and L. Zhuang. Enabling security in cloud storage SLAs with CloudProof. In Proc. of the USENIX Annual Technical Conference, 2011.
17. A. Shamir. How to share a secret. Commun. ACM, 22(11):612-613, 1979.
18. H. Takabi, J. B. D. Joshi, and G.-J. Ahn. Security and Privacy Challenges in Cloud Computing Environments. IEEE Security and Privacy, 8(6):24-31, 2010.
19. R. H. Thomas. A majority consensus approach to concurrency control for multiple copy databases. ACM Transactions on Database Systems (TODS), 4(2):180-209, 1979.
20. M. Vrable, S. Savage, and G. M. Voelker. BlueSky: A Cloud-backed File System for the Enterprise. In Proc. of the USENIX Conference on File and Storage Technologies (FAST), 2012.
21. C. Wang, Q. Wang, K. Ren, N. Cao, and W. Lou. Toward Secure and Dependable Storage Services in Cloud Computing. IEEE Trans. Serv. Comput., 5(2):220-232, 2012.
22. C. P. Wright, M. C. Martino, and E. Zadok. Ncryptfs: A secure and convenient cryptographic file system. In Proc. of the Annual USENIX Technical Conference, pages 197-210, 2003.
23. C. Yue. Toward Secure and Convenient Browsing Data Management in the Cloud. In Proc. of the USENIX Workshop on Hot Topics in Cloud Computing (HotCloud), 2013.
24. R. Zhao, C. Yue, and Q. Yi. Automatic detection of information leakage vulnerabilities in browser extensions. In Proc. of the International Conference on World Wide Web (WWW), pages 1384-1394, 2015.
25. Amazon Cloud Drive. http://www.amazon.com/gp/feature.html?ie= UTF8&docId=1000828861.
26. Box Cloud Storage. https://www.box.com/.
27. Dropbox Cloud Storage. https://www.dropbox.com/.
28. Google Drive. https://drive.google.com/.
29. HomeBank. http://homebank.free.fr.
30. HP Cloud Object Storage. https://www.hpcloud.com/products/object-storage.
31. iCloud. http://www.apple.com/icloud/.
32. iCloud Data Breach. http://www.forbes.com/sites/davelewis/2014/09/02/icloud-data-breach-hacking-And-nude-celebrity-photos/.
33. Microsoft OneDrive. http://windows.microsoft.com/en-us/onedrive/skydrive-To-onedrive.
34. OAuth 2.0 Authorization Framework. http://tools.ietf.org/html/rfc6749.
35. OpenID 2.0. http://openid.net/specs/openid-Authentication-2 0.html.
36. SciTE: A SCIntilla based Text Editor. http://scintilla.org/SciTE.html.
37. Swift-OpenStack. https://wiki.openstack.org/wiki/Swift.
38. The GNU C Library. http://www.gnu.org/software/libc/libc.html.